ISE Guest Self Registration

[aous.salloum]

Hi , 

I am doing ISE installation for one customer, they would like to have one AD group to be able to do guest self-registration in the guest portal 

is there a way to allow self-registration only to a specific group in AD ?

I don't want the BOYD and allow employees to guest access only, I need self-registration with sponsor approval but only specific AD group to be able to self-register instead of having the sponsor manually checking the AD group membership before approving the request if I add the AD username as a customer field in the portal

thank you.

[Ric Beeching]

Hi Aous,

The link below should be useful. You can manage which sponsor groups can create which types of guest accounts with User Identity Groups. These are defined elsewhere in ISE under Identity.

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_01110.html#concept_921E58BE513A4E6EABEEDF380391A7A3

Ric